Re: Product name by module

2016-05-17 Thread Ed Jaffe
On 5/17/2016 9:56 PM, Peter wrote: Is it always possible to identify the product name by looking through the load modules. No. Here in our shop there are some DATASET lying where we do not have any clue to which product it belongs to. Any pointers or ideas to know the product name by

Product name by module

2016-05-17 Thread Peter
Hello Is it always possible to identify the product name by looking through the load modules. Here in our shop there are some DATASET lying where we do not have any clue to which product it belongs to. Any pointers or ideas to know the product name by looking through the module ? Any

Re: What does it indicate when an SMF 30 subtype 4 or 5 has no completion section?

2016-05-17 Thread Charles Mills
That would account for it. I knew there were continuation records and I had read that paragraph but because I am only focused on the completion section I saw it as a missing completion section; I did not think "continuation." Thanks, Charles -Original Message- From: IBM Mainframe

Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread Donald J.
Yes. When I go to port 443 I also see the correct chain: openssl s_client -debug -connect dispby-117.boulder.ibm.com:443 -state SSL_connect:SSLv3 read finished A --- Certificate chain 0 s:/C=US/ST=New York/L=Armonk/O=INTERNATIONAL BUSINESS MACHINES CORPORATION/CN=deliverycb-bld.dhe.ibm.com

Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread Andrew Rowley
On 18/05/2016 0:53, John Eells wrote: - Added support for both SHA-2 (SHA-256) and 2048-bit RSA certificates.** - Put the package signing verification certificate where "anyone could get it" - Made the signing (certificate-based) check optional. - Continued to keep the integrity checking

Re: What does it indicate when an SMF 30 subtype 4 or 5 has no completion section?

2016-05-17 Thread Bob Rutledge
On 5/17/2016 7:10 PM, Charles Mills wrote: From time to time I see SMF 30 subtype 4 and 5 records with no completion section. Kind of an oxymoron: a step or job completion record with no completion section. Can anyone educate me on what that would indicate? How would one "interpret" such a

Re: Special characters in passwords from non-US computers (Italy)

2016-05-17 Thread John Mattson
Thanks to everyone, First let me say ECBDIC was not a consideration, since if I ever had to access my home mainframe from overseas it would most likely be with my own laptop with security of my choice, not what a hotel or cyber cafe provides. But using the solution I think I have found a local

What does it indicate when an SMF 30 subtype 4 or 5 has no completion section?

2016-05-17 Thread Charles Mills
>From time to time I see SMF 30 subtype 4 and 5 records with no completion section. Kind of an oxymoron: a step or job completion record with no completion section. Can anyone educate me on what that would indicate? How would one "interpret" such a record? FWIW, I am looking at one now. Record +

Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread Donald J.
The new GeoTrust Global CA is serial# 023456, expiration 5/20/2022. The old GeoTrust Global CA is serial# 12bbe6, expiration 8/20/2018. At +5eF in the server cert chain being sent out, there is "12 bb e6". 05d0 - 25 b0 68 f9 de 08 5a f3-29 cc d4 92 00 03 81 30 %.h...Z.)..0 05e0 - 82 03 7d

Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread Donald J.
John, I don't think you have the right GeoTrust certificate on your server. The server is sending out this cert chain: Certificate chain 0 s:/C=US/ST=New York/L=Armonk/O=INTERNATIONAL BUSINESS MACHINES CORPORATION/CN=deliverycb-bld.dhe.ibm.com i:/C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA -

Re: smp/e sha-2 support?

2016-05-17 Thread Tom Brennan
Create a profile or group named ADMIN, add some users to it, and list that out for the auditors whenever they ask. Best case, they will fall for it and you're done. Worst case, you have a spot (like a paper list but in RACF where it looks more legitimate) where you at least have a chance of

Re: JCL "COMMAND" statements - Follow-up question

2016-05-17 Thread Steve Beaver
Where is your SYSEXEC and/or SYSPROC -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Ted MacNEIL Sent: Tuesday, May 17, 2016 3:22 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: JCL "COMMAND" statements - Follow-up question OC is part of

Re: JCL "COMMAND" statements - Follow-up question

2016-05-17 Thread Ted MacNEIL
OC is part of OPS/MVS. So you need to look in its libraries. -teD   Original Message   From: Jeremy Nicoll Sent: Tuesday, May 17, 2016 07:30 To: IBM-MAIN@LISTSERV.UA.EDU Reply To: IBM Mainframe Discussion List Subject: Re: JCL "COMMAND" statements - Follow-up question On Tue, 17 May 2016, at

Interesting new non-volatile memory tech from IBM

2016-05-17 Thread John McKown
Faster & cheaper than FLASH, supposedly. Only mentions Power arch in the article I found. http://www.prnewswire.com/news-releases/ibm-scientists-achieve-storage-memory-breakthrough-300269117.html -- The unfacts, did we have them, are too imprecisely few to warrant our certitude. Maranatha!

Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread Tony Harminc
On 16 May 2016 at 15:47, Jerry Whitteridge wrote: > I'd reply to the Auditor "Please define Admin access as there is no one > privilege that grants all access" But there are several -- perhaps many -- privileges that grant access to grant all access. For

Re: Questions about EZAZSSI

2016-05-17 Thread Nims,Alva John (Al)
In TCPPROF (data set pointed to by PROFILE DD in the TCPIP PROC) See the "AUTOLOG" section, this is out and as you can see it is all commented out, so we start ours externally. AUTOLOG ; FTPD JOBNAME FTPD1 ; FTP Server ; WEBSRV; WWW Server ; SMTP

Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread Jesse 1 Robinson
An interesting take on ADDSD. We produce a periodic report here on userids with 'elevated access', which includes SPECIAL, OPERATIONS, and AUDITOR (the benign type). OPERATIONS cannot grant privileges but could do a lot of damage. I consider AUDITOR vital for sysprogs in order to diagnose--not

Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread Tom Conley
On 5/17/2016 10:55 AM, John Eells wrote: So...suppose we were to do something like this*: - Added support for both SHA-2 (SHA-256) and 2048-bit RSA certificates.** - Put the package signing verification certificate where "anyone could get it" - Made the signing (certificate-based) check

Re: How expensive is AMODE switching?

2016-05-17 Thread Peter Relson
Ed Jaffe wrote >We've been able to call fairly large 31-bit programs in 64-bit mode >... >Most SVC and PC-based services, such as STORAGE >OBTAIN/RELEASE, etc. can be called with no ill effects. I will state the obvious. "no ill effects" that are observed does not mean that there are none, and

Re: JCL "COMMAND" statements - Follow-up question

2016-05-17 Thread Jesse 1 Robinson
A major clue that 'OC' is not an exec is the absence of SYSPROC or SYSEXEC in the job stream. That pretty much indicates a load module somewhere in linklist or LPA. There are tools previously discussed here to track down such a module. . . . J.O.Skip Robinson Southern California Edison Company

Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread John McKown
On Tue, May 17, 2016 at 9:41 AM, Mike Schwab wrote: > Any ID that can grant privileges to another ID. > ​By the above definition, _every_ id in RACF which has TSO capability is an administrator. How? Suppose that I am BUBBA. I log into TSO. I issue the commands: ADDSD

Re: Questions about EZAZSSI

2016-05-17 Thread Jesse 1 Robinson
Although I know little about TCP/IP, I'd like represent the automation viewpoint. Although a task can be started in various ways, including (for some) an option in SSN or (for most) a command in SYS1.PARMLIB, only a task started by 'automation' (SA, for example), can be managed by automation

Re: SORT - Merge Two Files by Variable

2016-05-17 Thread Sri h Kolusu
Ravi, A sample input and desired output would have helped. Your description of the problem is too vague. Either way as Martin pointed out DFSORT Joinkeys will give you the desired results. Check out the Smart DFSORT tricks on Joinkeys which is what you need Join fields from two files on a key

Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread Dyck, Lionel B. (TRA)
I think you've got it - with the key being that you support SHA-2/256 and RSA and thus SHA-1 is not required -- Lionel B. Dyck (Contractor) Mainframe Systems Programmer Enterprise Infrastructure Support (Station 200)

Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread John Eells
So...suppose we were to do something like this*: - Added support for both SHA-2 (SHA-256) and 2048-bit RSA certificates.** - Put the package signing verification certificate where "anyone could get it" - Made the signing (certificate-based) check optional. - Continued to keep the integrity

AW: Re: ADRDSSU message Keywords Clarification

2016-05-17 Thread Peter Hunkeler
>There are manuals for DFSMSdss that should be helpful on the ibm website. ADR and ADRY messages are documented "z/OS MVS System Messages Volume 1 (ABA - AOM). As obvious as can be, isn't it? -- Peter Hunkeler -- For

Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread Mike Schwab
Any ID that can grant privileges to another ID. On Mon, May 16, 2016 at 2:47 PM, Jerry Whitteridge wrote: > I'd reply to the Auditor "Please define Admin access as there is no one > privilege that grants all access" > > Jerry Whitteridge > Manager Mainframe

Re: JCL "COMMAND" statements

2016-05-17 Thread Jousma, David
Many ways to skin the cat. Your way works fine too, and is one less line of code :) _ Dave Jousma Assistant Vice President, Manager, Mainframe Engineering david.jou...@53.com 1830 East Paris, Grand Rapids, MI  49546 MD RSCB2H p

Re: JCL "COMMAND" statements

2016-05-17 Thread Paul Gilmartin
On 2016-05-16, at 13:08, Jousma, David wrote: > ... > exit > > > /* Allocate results output file */

Re: GIMXSID Used for ISV ?

2016-05-17 Thread Lizette Koehler
Have you contacted the ISV to see if they use it? I am not sure, that as a general rule, a module or function would be used by a particular ISV. But that the ISV could tell you if they use it. What problem are you trying to solve with this question? If you are trying to determine levels of

GIMXSID Used for ISV ?

2016-05-17 Thread Jake Anderson
Hi, Does GIMSXID used for other ISV products to know the current Maintenance level and to order based on the Utility Output ? Jake -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to

Re: ADRDSSU message Keywords Clarification

2016-05-17 Thread Lizette Koehler
Have you done any internet searches on the messages to see what these fields mean? Have you gone to www.ibm.com and searched on the messages? There are manuals for DFSMSdss that should be helpful on the ibm website. Lizette > -Original Message- > From: IBM Mainframe Discussion List

Re: JCL "COMMAND" statements

2016-05-17 Thread Greg Shirey
No, not me... My main contributions to the CBT are found in your stuff -- FILE452. But thanks for the thought. Greg Shirey Ben E. Keith Company -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Dan D Sent: Tuesday, May 17, 2016

Re: JCL "COMMAND" statements

2016-05-17 Thread Dan D
I find the SDSF interface a little *clunky* and awkward. I prefer the CMD REXX from CBT (Greg Shirey maybe) ... /* rexx */ Address TSO Arg con_command

Re: XMEM and Swap ability

2016-05-17 Thread michelbutz
Rob I understand now however the second address space is a started task So I don't have axlist,tklist,lxlist available I guess thinking about it the design was a good Idea as we shouldn't be "hacking" into system Address spaces Sent from my iPhone > On May 17, 2016, at 8:22 AM, Rob Scott

Re: ADRDSSU message Keywords Clarification

2016-05-17 Thread Elardus Engelbrecht
Nathan Astle wrote: >During a restore of a Dataset I see the below keywords along with the ADR >Messages : >RI01 >RI01 ... snipped ... >Could someone please point me to a manual where I can get the explanation for >the above keywords ? That is Diagnostic information used by IBM service

Re: XMEM and Swap ability

2016-05-17 Thread Rob Scott
If you are in control of both address spaces (ie the second ASID is not "foreign"), there are all sorts of non-common memory sharing options available to you, including (but not limited to) : (1) ASID1 starting ASID2 using ASCRE - you can get an official cross-memory bind and then use ALETs to

Re: SORT - Merge Two Files by Variable

2016-05-17 Thread Martin Packer
Or, less kindly, learnt DFSORT / ICETOOL. It's a very useful utility and pervasive (if one counts Syncsort as the overlap in syntax and semantics approaches 100%). It's really not that difficult. Cheers, Martin Sent from my iPad > On 17 May 2016, at 11:51, Elardus Engelbrecht

GSE UK - Large Systems Agenda

2016-05-17 Thread Leanne Wilson
Hello all, The agenda for the Large Systems Working Group has been finalised. Please find the agenda below: http://bit.ly/1Tkyf1O To register for the event please do so here: http://lsx.gse.org.uk/content/content_event_register.php?id=15

Re: JCL "COMMAND" statements - Follow-up question

2016-05-17 Thread Tony Thigpen
Thanks. It turns out that "OC" is part of OPS/MVS, so I now can document the job. Tony Thigpen Jeremy Nicoll wrote on 05/17/2016 07:30 AM: On Tue, 17 May 2016, at 12:19, Tony Thigpen wrote: OK, dumb question time. My job is working with some JCL I found in another job: //STEP01 EXEC

Re: XMEM and Swap ability

2016-05-17 Thread michelbutz
So the face that a SRB is running in space #2 Would automatically mKe it swapped in ? If I had to go thru all that trouble of writing A routine I would rather XMEM post space #2 to do A SYSEVENT TRANSWAP Sent from my iPhone > On May 15, 2016, at 3:59 PM, Ed Jaffe

ADRDSSU message Keywords Clarification

2016-05-17 Thread Nathan Astle
Hi, During a restore of a Dataset I see the below keywords along with the ADR Messages : RI01 RI01 PRIME STEND TDDS NEWDS TDNVS TDLOG NEWDS TDNVS TDLOG TDLOG STEND CLTSK DSSU Could someone please point me to a manual where I can get the explanation for the above keywords ? Nathan

Re: [EXTERNAL] Re: smp/e sha-2 support?

2016-05-17 Thread Dyck, Lionel B. (TRA)
John the bottom line is that, while it may not be a security exposure or a system integrity issue, it is an issue from the standpoint of auditors and centralized security organizations who dictate policy. Whether it is a private or public environment, we all have these organizations who have

Re: JCL "COMMAND" statements - Follow-up question

2016-05-17 Thread Tony Thigpen
OK, dumb question time. My job is working with some JCL I found in another job: //STEP01 EXEC PGM=IKJEFT1A,REGION=0M //SYSPRINT DD SYSOUT=* //SYSTSPRT DD SYSOUT=* //SYSTERM DD SYSOUT=* //SYSTSOUT DD SYSOUT=* //SYSTSIN DD * OC C('DS QD,TYPE=ALL,ONLINE') /* But, I want to look at the "OC"

Re: Questions about EZAZSSI

2016-05-17 Thread Mike Stayton
From the IP Configuration Reference Step 3: Configure VMCF and TNF The Pascal socket interface uses the IUCV/VMCF services for a limited set of inter-address space communication flows. As a result, if you are using any applications (provided by IBM or others) that use the Pascal socket API, you

Re: SORT - Merge Two Files by Variable

2016-05-17 Thread Elardus Engelbrecht
Ravi Gaur wrote: >Since I am not that good on Sort programming could somebody throw a code which >could help in Merging two files which has common BY variable..(I generally do >it with SAS) however where this required it's not licensedso it's possible >via rexx however for millions of

Re: SORT - Merge Two Files by Variable

2016-05-17 Thread Martin Packer
I'd research DFSORT JOINKEYS. Cheers, Martin Sent from my iPad > On 17 May 2016, at 08:13, Ravi Gaur wrote: > > Since I am not that good on Sort programming could somebody throw a code which could help in Merging two files which has common BY variable..(I generally

SORT - Merge Two Files by Variable

2016-05-17 Thread Ravi Gaur
Since I am not that good on Sort programming could somebody throw a code which could help in Merging two files which has common BY variable..(I generally do it with SAS) however where this required it's not licensedso it's possible via rexx however for millions of records that's damn